Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092C3228783311F0BD3DC7CFDAE4EC9C.roa
File: 092C3228783311F0BD3DC7CFDAE4EC9C.roa (raw, json)
Hash identifier: 4TgHiY3k+jTFsK1z7qiTW6mUwOYa8DQi8ePvVYQ2ZZc=
Subject key identifier: D8:C5:11:65:89:0F:C7:27:45:58:40:69:2A:B3:C2:A8:4C:1E:BE:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01919C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092C3228783311F0BD3DC7CFDAE4EC9C.roa
Signing time: Wed 13 Aug 2025 10:48:25 +0000
ROA not before: Wed 13 Aug 2025 10:48:20 +0000
ROA not after: Mon 03 Nov 2025 10:48:20 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102812 (0x1919c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 13 10:48:20 2025 GMT
Not After : Nov 3 10:48:20 2025 GMT
Subject: CN=689c6d78-6709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:de:af:72:03:39:29:86:bf:cb:82:3b:17:
8f:93:d1:ed:f8:31:74:44:f7:24:b2:26:2e:c0:c2:
d2:af:26:f4:80:2c:80:c8:99:a7:2a:84:19:5d:cd:
16:95:b6:d9:0d:40:4b:8a:32:53:03:34:a7:ef:8a:
25:7f:f0:aa:64:99:e3:c4:50:a2:5f:34:0f:ff:7a:
eb:29:99:83:94:5d:cf:be:9e:f5:de:75:2d:87:f3:
cb:0c:df:f4:35:a2:16:cc:8d:ce:69:0b:61:b1:50:
4c:41:cc:1b:00:3d:0c:5f:c9:85:31:c0:96:ad:a7:
18:b3:ce:e7:66:8f:ef:7a:2b:3c:d6:ca:01:c5:fd:
1a:40:7f:24:ac:a1:1a:c4:26:75:f4:e9:7b:98:ad:
c5:e0:26:ab:d3:2a:f4:ab:3d:14:c6:a5:c4:0f:ab:
25:2c:e5:e4:70:5f:90:98:a3:1c:1c:e4:31:5a:53:
a6:03:76:c9:28:19:98:e9:58:56:61:cd:0f:af:bf:
c5:e4:81:59:48:a6:8e:dd:b3:39:07:bb:ba:ed:27:
57:12:31:b8:b8:1e:67:e7:61:f4:c7:d5:05:d5:e5:
61:b7:3a:9d:e1:64:b2:7f:af:84:ac:74:74:b5:ca:
40:71:bf:a8:57:dc:f4:de:d3:75:31:80:1f:16:77:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:11:65:89:0F:C7:27:45:58:40:69:2A:B3:C2:A8:4C:1E:BE:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/092C3228783311F0BD3DC7CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ab:a7:a5:74:bc:e2:9c:ef:57:4f:f4:3d:2c:6c:ae:13:16:
ee:3f:a2:e6:66:db:eb:19:53:e8:0a:65:33:e3:8f:7c:7d:2c:
8d:ea:de:97:3e:d0:90:53:70:ef:db:4a:23:20:e4:e9:23:4e:
5a:5c:81:a9:61:7b:d0:81:cc:ed:c0:56:0b:9b:0f:d3:92:6a:
cf:26:96:38:73:9d:26:fd:42:6c:75:73:62:69:3c:7e:d6:37:
f5:37:de:09:98:b8:da:4a:b9:4e:92:f1:69:9f:dd:9e:42:cb:
9a:8c:cc:04:0a:f6:b1:14:12:0a:51:b9:67:c7:0b:55:0c:29:
32:b9:7f:09:ac:9d:91:1c:70:82:06:e0:40:bb:25:31:44:75:
cf:c5:30:b1:74:81:67:86:04:cc:57:3c:4e:0e:a2:c4:16:fa:
ee:77:94:ed:8e:94:05:c9:20:72:9e:7e:93:db:66:f2:8d:ac:
03:ad:a1:6a:1a:ad:03:fc:8b:aa:63:21:40:f9:59:42:79:c3:
58:ef:71:5c:af:30:6f:85:c1:31:5f:a4:f1:26:c2:fc:49:95:
35:c2:db:8a:0f:c0:4f:12:7b:7e:8d:28:17:35:02:2b:0f:63:
ae:69:74:50:80:c9:9c:aa:ff:a3:b3:fb:be:6c:e0:b3:b9:ef:
aa:31:4d:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAZGcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwODEzMTA0ODIwWhcNMjUxMTAzMTA0ODIwWjAYMRYw
FAYDVQQDEw02ODljNmQ3OC02NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuL7er3IDOSmGv8uCOxePk9Ht+DF0RPcksiYuwMLSryb0gCyAyJmnKoQZ
Xc0WlbbZDUBLijJTAzSn74olf/CqZJnjxFCiXzQP/3rrKZmDlF3Pvp713nUth/PL
DN/0NaIWzI3OaQthsVBMQcwbAD0MX8mFMcCWracYs87nZo/veis81soBxf0aQH8k
rKEaxCZ19Ol7mK3F4Car0yr0qz0UxqXED6slLOXkcF+QmKMcHOQxWlOmA3bJKBmY
6VhWYc0Pr7/F5IFZSKaO3bM5B7u67SdXEjG4uB5n52H0x9UF1eVhtzqd4WSyf6+E
rHR0tcpAcb+oV9z03tN1MYAfFnewNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNjF
EWWJD8cnRVhAaSqzwqhMHr4hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOTJDMzIyODc4MzMxMUYwQkQzREM3Q0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHcMA0GCSqGSIb3DQEB
CwUAA4IBAQBJq6eldLzinO9XT/Q9LGyuExbuP6LmZtvrGVPoCmUz4498fSyN6t6X
PtCQU3Dv20ojIOTpI05aXIGpYXvQgcztwFYLmw/TkmrPJpY4c50m/UJsdXNiaTx+
1jf1N94JmLjaSrlOkvFpn92eQsuajMwECvaxFBIKUblnxwtVDCkyuX8JrJ2RHHCC
BuBAuyUxRHXPxTCxdIFnhgTMVzxODqLEFvrud5TtjpQFySBynn6T22byjawDraFq
Gq0D/IuqYyFA+VlCecNY73FcrzBvhcExX6TxJsL8SZU1wtuKD8BPEnt+jSgXNQIr
D2OuaXRQgMmcqv+js/u+bOCzue+qMU1k
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:20 2025 by rpki-client